locked
Computer Account in SQL - Risks and Concerns RRS feed

  • Question

  • Question about adding a domain computer account as a login in SQL Server. What is its purpose? And what are the risks, if any, that one should be aware of? Thanks.

    Tuesday, May 15, 2012 3:26 PM

Answers

All replies

  • It identifies the computer as a login in SQL Server to which rights can be granted. 

    I would recommend creating a service account or accounts, preferably Windows logins,  then grant each account rights appropriate to its purpose.  I would prefer not to use the Computer Account for SQL Server access.  It is usable, but there are wrinkles. 

    For a discussion of authentication that includes some notes on the Computer Account, please see Paranoid Mike's response here:  http://stackoverflow.com/questions/3765751/does-access-to-server-resources-require-client-process-to-login-to-server-machin

    RLF

    • Proposed as answer by amber zhang Wednesday, May 16, 2012 7:28 AM
    • Marked as answer by amber zhang Tuesday, May 22, 2012 7:09 AM
    Tuesday, May 15, 2012 8:35 PM
  • Hi check this out.

    http://www.ultimatewindowssecurity.com/wiki/WindowsSecuritySettings/Enable-computer-and-user-accounts-to-be-trusted-for-delegation

    Sunday, May 20, 2012 8:20 AM